web_ad
Cloud General
April 12, 2020

Playbook for Web Ad Fraud

By venkat

False clicks and fraudulent display of web-placed advertisements

Description

Lists of full credit and/or debit card data are tested against a merchant’s payment processes to identify valid card details. The quality of stolen data is often unknown, and Carding is used to identify good data of higher value. Payment cardholder data may have been stolen from another application, stolen from a different payment channel, or acquired from a criminal marketplace.

OTHER NAMES: Card stuffing;Credit card stuffing;Card verification

SOURCE: https://www.owasp.org/images/3/33/Automated-threat-handbook.pdf

False clicks and fraudulent display of web-placed advertisements

Playbook

Preparation, Identification, Remediation

All the steps at https://www.owasp.org/images/3/33/Automated-threat-handbook.pdf

References

Real attack instances

Tagse-commerce web

About The Author

Venkat is founder of FlexibleIR. He brings 20 years of experience in building tools and products at Sun Microsystems, Intel, Novell, HP, Yahoo,Tesco and startups. He has developed test suites and frameworks for post silicon validation of the Xeon processor family (Fuzzing). He has worked deeply on UFS files system at SUN Microsystem. Was a security paranoid at Yahoo.

Leave a Reply